Transcript for:
Overview of Qubes OS Features and Benefits

in this video we're going to Madison Cube Garden no no that's cubes OS cubes OS yeah but I I don't know I don't know how else we're going to fit in the joke cubes OS is it yet another Linux distribution I'm so tired of Linux distributions well this is actually not another Linux distribution now if you've watched our level one news and if you haven't what's wrong with you we're constantly talking about security threats there is not a week that goes by that there's not at least two at least two horrible security threats really bad it's windows it's Android and hey even Linux lenux is not immune constantly everybody asks what can I do what how can I protect myself how can I lock it down well cubes OS we'll go a long way yeah we get a lot of of requests cubes is a project that I've been following for a long time and it's running here on this laptop this is an Asus ux32 VD this is an older model it's an ivy Bridge i7 so it's four cores eight threads I've upgraded the the memory so I think it's 10 or 12 GB of memory it's an older laptop but we're running cubes OS and it's actually really funny I've got a Windows VM over here this is running Chrome in a Windows VM and then seamlessly here is Firefox and another VM that's running shoplifter on an Apple 2 emulator because why not virtual machines right uh cubes supports Hardware pass through there are other VMS here That You Don't See that are running the network that are running the firewall you can spool up a copy of of Firefox that's in a disposable VM and you know you know it's like wait a minute so this laptop has like a virtual Network and like f you just named five virtual machines that are running on this thing who what sort of crazy masochist would want to do that compartmentalization for security that's why you would want to do that right now out of the box this thing gives you named VMS like personal work untrusted and like we talked about disposable like if you use the the Chrome Incognito window it's like that's a risky click let's just pull up a disposable VM so that if this infects me with some sort of horrible malware just make it go away just just put destroy that VM with fire and it's an incognito operating system yeah nothing of value was lost so the idea isn't that you can Shield yourself or that you can protect yourself you probably can't that's just the harsh reality but what you can do is compartmentalize everything down into these little individual boxes and make sure that the dangerous stuff never comes near the important boxes yeah you can even run tour in some of your virtual machines or you can enable tour you know sort of globally in the virtual machine that's responsible for the networking for all of the other virtual machines which is it's sort of a crazy concept to wrap your head around it's like all of your applications are running inside a virtual machine which is running on this laptop top now there is overhead there's an overhead penalty associated with that uh the Windows 7 VM that I've set up here that's running applications seamlessly you know it doesn't really work with Windows 10 because of the changes in Windows 10 that's being worked on but as of right now the ticket for that on GitHub is stalled because they don't have anybody to work on it they don't have anybody to work on the on the compatibility and admittedly the security in Windows 10 is much better than Windows 7 but uh you can run Windows 10 just not seamlessly where you click on an application side by side you can have two copies of Fire Fox one and an untrusted VM and that's going to have a red border and you can have a trusted VM that's running with a green border and neither of these two copies of fir Fox can see each other or do anything malicious with with either with either one of them but at the same time you do have a level of interconnectivity so you can actually with a little bit of work you can pass files between these VMS and you can use the clipboard between all of them so you do have this overall operating system that is doing some of the more basic commands among all your little VMS so they're are not just all out there on their own yeah and and like we say the name of the game with this VM is compartmentalization so there are some downsides when you compartmentalize that heavily all the different kinds of things that you might be running in your different virtual machines maybe the biggest downside is Hardware you know and this is something that comes up with regular Linux distributions too this laptop actually works really well but not all laptops are going to work really well you can easily find some weird network adapter or audio controller or even the mouse pad that is just not going to work mouse pad touchpad yeah yeah there I have seen mouse pad incompatibilities in my days but it's a video for another time yeah the networking for example is Hardware pass through so you you read about PCI Express pass through I've done videos on graphics card passr cubes by default wants to pass through your network adapter through to the networking virtual machine that that goes for wireless network adapters as well as wired network adapters and so that means setting up the wireless is a little bit fiddly on cubes uh on some laptops this one in particular I actually had to go in and manually add a shortcut to the wireless Configuration utility in the virtual machine that handles the network because it wasn't there by default wired connections with cubes though in my experience have generally you know been pretty Flawless as long as the network art is support it another Hardware drawback is Ram because for example if you're going to boot a Windows Virtual Machine it's going to allocate RAM and you know Windows might need a lot of ram Windows is not Frugal with ram yeah and so once you've allocated that Ram to Windows it's no longer available to any of the other VMS so it is a very memory hungry way to run a computer depending on what you're running now with the the Linux VMS they're a little bit better about that yeah they're a lot better about that but you still have to think about it you don't have an infinite supply of resources with which to spool up and there's no like you know Android dealing with oh I don't need that app anymore let me have that memory no once it's allocated it's allocated yeah yeah it it is true that the Linux applications are a little bit closer to Containers than full virtual machines so they can you know sort of pick and choose get up give up memory and release memory and that sort of thing but you can totally run Android x86 um through some you know if you want to run like a Hackintosh version of the Mac OS you can totally do that we're you know again we're running Apple 2 emulation in the browser things like good old games old dos games those sorts of virtual machines you can run those as well and all on a single machine and all on a on a relatively modest laptop I mean this is the future uh you don't think that you know it's like wait a minute these guys you know who's going to run a virtual machine this is crazy if you've ever downloaded an old game from good old games you're using exactly the same kind of Technology yeah it's really common for those old games to come with DOs boox and Gog actually goes through all the work of making an exe that just does it for you but it's doing the same thing that we're doing here and you can actually run the native operating system and play choplifter as it was played in apple too in the in the 80s when dinosaurs r on the earth the uh the really exciting thing about this though is the future like the future of this kind of thing I think is Computing and you can kind of get a glimpse of what the future is going to be because technology moves so fast that rather than try to to maintain compatibility you know for dos and your current operating system all the way back to the 80s it's just going to be faster and easier to maintain that through emulation through virtualization through other technologies that provide the Legacy facilities but also compartmentalize those Legacy facilities because you know running dos that's a security risk running a program designed for Windows 95 or 98 that's a security risk this is a great solution uh when we talk about for example the recent ransomware attack if you're watching this and 2018 in 20177 there was a ransomware attack it was bad and so that targeted older operating systems a lot of people were running Windows XP you know Windows 2000 whatever that's the financial World they do that it's what's crazy well with this you could still run it but not have quite as much risk because it doesn't have to be tied in to all of your other systems and that would be a great solution that I'm sure they're not doing in the banking world or the hospitals or the train stations or the air ports and everything that got hit but that that would be a great way if you have to run old operating systems this is a great way to do it now the cubes website has a really great intro and if that has enticed you we are going to do how to install cubes and how to configure Cubes video on the Linux Channel we're waiting for some updates to the ryzen platform but ryzen especially like a 1700 like an 8 core or even a six core 1600 is a great platform for this type of operating system it even supports GPU pass through um before you know passing through a graphics card like you would on Linux and so we're going to do a complete guide and installation configuration video for cubes for the Linux channel so if that's of interest to you there's a link to the Linux channel in the description you should subscribe there so if you just want to know what the you know what sort of the state-of-the-art is with virtualization and the kinds of things that are out there cubes is pretty much bleeding edge for what it offers a lot of you might be thinking oh finally finally I'm going to have a Linux desktop and I'm going to run Windows even if it's Windows 7 I don't care I'll run Windows 7 in a virtual machine and I'm going to play my Steam games in that oh the future is now well the future is not quite now so close yeah they so with Vega where is Vega we don't know with Vega they actually promised that maybe they would give us the the Rosetta Stone to unlock this but then at the last moment snatched it away so there's a technology called Sr iov it stands for a single root IO virtualization it's been available in the Enterprise in fact a lot of the technology that is in cubes has been available in the Enterprise for the better part of 10 years all of this is old hat for for Enterprise Computing the way that virtual machines work virtual desktops you might have vdi infrastructure in in a company that you work for um srov is you can take a graphics card uh a special kind of graphics card for servers and you can provide a virtual desktop or a virtual machine that is shared among several users and so you know Nvidia for example has a popular one um that has you know 16 GB of hbm2 memory kind of like Vega and it will provide support for up to 16 users on a single machine so 16 virtual machines on a single machine and all of those have access to the full GPU capabilities or a portion of the full GPU capabilities um of that graphics card so if for example this is you know this laptop has both Intel and Nvidia and so while I can pass through the entire graphics card the second entire graphics card to the VM I can't have one uh Graphics adapter shared among two virtual machines but even if RX Vega would only support srov for just two clients that would pretty much mean that it's not going to be used in the server Market but it would let you use those Graphics capabilities with two virtual machines or or the host and a virtual machine or something like that and so the way that we're running Windows seamlessly here we would also be able to run a game seamlessly as well but because we can't we need to pass through a full graphics card and we can do that today it's just not as convenient now this is something they can do this is not like what if it's done in the Enterprise yeah the graphics manufacturers just need to give you the ability to do that so if you're vocal about it maybe uh but the thing about cubes that is most exciting is not what it can do now that's pretty cool what it can do now I mean it's really impressive but it's just like we're we're like 90% of the way there on some really really amazing technology it's like imagine a world and that's this the possibility of the future is the really incredible part yeah so I want you to imagine a version of cubes in the future where you do have a graphics card that supports single root IO virtualization but you also have technologies that there supported um for moving a live running virtual machine between devices this is something that we have in the Enterprise under certain circumstances if you have machines that are similar enough in terms of architecture processor architecture you know whatever um you can move running virtual machines that people are using from one server to another without them realizing that anything has happened and this is really convenient for high availability for up time let's say a power supply goes out of a server or a drive array is failing or a network card is failing or a ser is doing something weird as long as the server hasn't completely crashed you can move those running virtual machines from the V from the server the host that needs updating or needs whatever type of Maintenance um so imagine that on a personal level imagine that coming to an individual so you're running an application on your cell phone and then you can migrate it to your laptop or you can migrate a running application from your laptop to your desktop a lot of problems go away synchronizations becomes a different proposition instead of having you know one drive or Dropbox or Google drive or something in the cloud that's synchronizing all of your files you could just move the running virtual machine between your devices maybe maybe the virtual machine doesn't even have to leave your phone maybe the the virtual machine continues to run on your phone and you just have the graphics portion of it actually run on another computer we already have that technology in the Enterprise and projects like cubes are bringing that technology to the individual it's really exciting now we we should mention that cubes is not specifically working on the mobile thing we don't want to we don't want to sell any falsehoods here but uh it is something that with this technology you can see it being a real possibility you could really just have a single operating not even an operating system but a number of operating systems in this situation yeah with you at all times and you know there's never a shutdown you never stop using it you just switch from phone phone to desktop to laptop or whatever it just goes with you yeah if you're already locked into a platform like locked into Windows or or locked into Mac OS cubes gives you a shot at freedom without actually really giving up anything so you can transition to a more open operating system you can use cubes not just for security but also full access to whatever you want so in that sense you can be OS agnostic it it doesn't really matter I mean you don't have to get married to Apple you don't have to get married to Microsoft you don't have to get married to Linux you can run free BSD you can run a lot of other operating systems it doesn't really matter you can use what works best for you and if the situation changes you know you can keep using the old stuff for legacy purposes maybe you've got an old application that you want to run but you know for your other Computing you can use what's secure and what's best for you I think if you're going to use the marriage analogy this is really bigam me as many as you want as long you got to support them you got to have the ram well there you have it folks uh we're check it out we'll see on the level one forum and watch out for the installation video on the level one Linux Channel tldr you should check out cubes cubes is the future of computing whether or not you use it yourself this is where Computing is going this type of virtualization so you should take a look at it and see you know not necessarily cubes itself but what cubes does is the future see you